Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mEQWdY1Ua0-oKDZI9azB7iL2NzQ.roa
File: mEQWdY1Ua0-oKDZI9azB7iL2NzQ.roa (raw, json)
Hash identifier: V29BaLljS/5ez5oq/MJwZ/hS3DdOyvV/kDE6a0Hlz5c=
Subject key identifier: 98:44:16:75:8D:54:6B:4F:A8:28:36:48:F5:AC:C1:EE:22:F6:37:34
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D5937699C09F8DA082A8425427D6B8055
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mEQWdY1Ua0-oKDZI9azB7iL2NzQ.roa
Signing time: Tue 30 Jan 2024 07:13:40 +0000
ROA not before: Tue 30 Jan 2024 07:13:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197450
IP address blocks: 45.128.233.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.44.0/24 maxlen: 24
87.121.46.0/24 maxlen: 24
94.156.79.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
185.221.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 09:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:59:37:69:9c:09:f8:da:08:2a:84:25:42:7d:6b:80:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 30 07:13:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=984416758d546b4fa8283648f5acc1ee22f63734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c7:f4:e8:f4:38:54:a0:27:dd:c7:97:92:b2:
be:12:62:5d:b9:d8:17:6a:fa:9a:56:c9:4f:7b:37:
fc:fa:f6:39:64:cc:3c:44:31:ed:e7:a2:c1:98:dd:
45:29:10:31:26:64:35:13:a3:e4:2e:28:0e:d1:ae:
93:40:d9:6c:16:5d:fe:fd:80:b1:c4:f8:e6:c7:54:
20:10:ba:46:82:35:46:70:27:75:ac:01:cb:1a:1c:
88:94:b0:fd:39:ff:a1:ff:6f:eb:28:65:c0:29:8a:
ed:46:1a:52:dd:bb:e2:3d:ed:51:6e:11:70:63:69:
0c:fa:eb:ae:fc:52:ce:ac:94:c9:a1:37:12:7c:68:
0d:f2:db:b6:cb:7d:3c:12:dc:92:b0:89:50:14:8c:
5d:86:9b:9a:60:86:e3:2b:f6:1d:66:7e:ff:52:1a:
24:9a:3c:bf:9f:36:95:05:ce:8c:c3:7a:58:c6:f4:
f4:a5:a4:ae:e9:52:87:c9:0c:7e:fd:dd:45:43:24:
30:ad:e8:2d:29:e5:1d:67:32:be:82:99:f4:93:a0:
54:f1:0b:cd:78:98:5d:8b:25:16:19:1b:19:86:26:
9b:e2:f1:fd:81:e1:d3:7b:dd:e0:a5:85:21:a4:eb:
07:c1:02:60:2a:8b:97:1d:e0:b8:28:a0:57:3b:ca:
47:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:44:16:75:8D:54:6B:4F:A8:28:36:48:F5:AC:C1:EE:22:F6:37:34
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mEQWdY1Ua0-oKDZI9azB7iL2NzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.233.0/24
85.31.47.0/24
87.120.166.0/24
87.121.44.0/24
87.121.46.0/24
94.156.79.0/24
178.215.239.0/24
185.221.64.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:05:f0:e6:08:70:d7:7b:9e:2a:0a:ef:9c:8d:82:58:7a:fe:
1d:c9:a1:29:dc:de:1e:3b:e6:04:74:a9:88:98:06:0f:32:0e:
f9:f1:2f:87:b1:73:33:25:b4:c7:be:bb:53:fa:eb:b8:21:92:
8e:a5:56:1e:4b:49:5a:d1:b4:8a:65:f2:dd:57:65:1e:31:64:
da:af:17:57:f0:ef:42:be:a2:70:ec:d9:28:b7:84:fd:7d:b7:
25:b9:ba:f8:f4:cc:7c:48:5f:5c:40:49:99:11:68:19:28:ac:
31:88:7f:ee:e8:0a:ff:05:ce:d0:92:e6:ca:84:65:57:16:a2:
ea:12:6f:30:00:03:fa:2f:31:84:c3:10:d5:b7:e3:e7:42:a8:
4b:a2:0d:72:cb:e1:71:46:08:0c:45:49:36:5a:db:f6:99:29:
9e:40:b7:49:e3:54:bf:2f:9e:e8:a4:99:4e:83:52:df:2a:55:
e5:9a:c9:2c:b8:55:26:e8:7b:b0:03:2e:04:cd:28:12:77:1a:
c8:2c:e3:97:0e:d9:1b:c8:ff:a4:c4:a1:84:4f:c1:f4:4a:23:
89:eb:d5:3f:1f:c9:43:d7:7d:ff:c6:39:80:60:fa:92:ae:b6:
2c:87:32:4a:e1:6c:29:87:1c:e4:fa:18:4e:c7:01:a1:a3:01:
49:47:05:43
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAY1ZN2mcCfjaCCqEJUJ9a4BVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMTMwMDcxMzQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODQ0MTY3NThkNTQ2YjRmYTgyODM2NDhmNWFjYzFlZTIyZjYzNzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsf06PQ4VKAn3ceXkrK+EmJdudgX
avqaVslPezf8+vY5ZMw8RDHt56LBmN1FKRAxJmQ1E6PkLigO0a6TQNlsFl3+/YCx
xPjmx1QgELpGgjVGcCd1rAHLGhyIlLD9Of+h/2/rKGXAKYrtRhpS3bviPe1RbhFw
Y2kM+uuu/FLOrJTJoTcSfGgN8tu2y308EtySsIlQFIxdhpuaYIbjK/YdZn7/Uhok
mjy/nzaVBc6Mw3pYxvT0paSu6VKHyQx+/d1FQyQwregtKeUdZzK+gpn0k6BU8QvN
eJhdiyUWGRsZhiab4vH9geHTe93gpYUhpOsHwQJgKouXHeC4KKBXO8pHZwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFJhEFnWNVGtPqCg2SPWswe4i9jc0MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvbUVRV2RZMVVhMC1vS0RaSTlhekI3aUwyTnpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQALYDpAwQA
VR8vAwQAV3imAwQAV3ksAwQAV3kuAwQAXpxPAwQAstfvAwQAud1AMA0GCSqGSIb3
DQEBCwUAA4IBAQCpBfDmCHDXe54qCu+cjYJYev4dyaEp3N4eO+YEdKmImAYPMg75
8S+HsXMzJbTHvrtT+uu4IZKOpVYeS0la0bSKZfLdV2UeMWTarxdX8O9CvqJw7Nko
t4T9fbclubr49Mx8SF9cQEmZEWgZKKwxiH/u6Ar/Bc7QkubKhGVXFqLqEm8wAAP6
LzGEwxDVt+PnQqhLog1yy+FxRggMRUk2Wtv2mSmeQLdJ41S/L57opJlOg1LfKlXl
msksuFUm6HuwAy4EzSgSdxrILOOXDtkbyP+kxKGET8H0SiOJ69U/H8lD133/xjmA
YPqSrrYshzJK4Wwphxzk+hhOxwGhowFJRwVD
-----END CERTIFICATE-----
Generated at Tue Jan 30 14:12:49 2024 by rpki-client on console-ams.rpki-client.org